PicketBox contains various implementations of an authorization manager that can be used to perform enforcement for an user for a particular resource.
Available implementations of Authorization Manager
PicketBoxDroolsAuthorizationManager : Drools based authorization manager. (Performs enforcement only).
PicketBoxXACMLAuthorizationManager: XACML v2 based authorization manager. (Performs enforcement only).
This is described here.